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Question: 1 


You have deployed a web application targeting a global audience across multiple Oracle Cloud 
Infrastructure (OCI) regions. 


You decide to use Traffic Management Geo-Location based Steering Policy to serve web requests to users 
from the region closets to the user. Within each region you have deployed a public load balancer with 4 
servers in a backend set. During a DR test disable all web servers in one of the regions however, traffic 
Management does not automatically direct all users to the other region. 


Which two are possible causes? 


A. You did not setup a Route Table associated with load Balancer's subnet 


B. You did not setup an HTTP Health Check associated with Load Balancer public IP in the disabled 
region. 


C. Rather than using Geo-Location based Steering Policy, you should use Failover Policy Type to serve 
traffic. 


D. One of the two working web servers In the other region did not pass Its HTTP health check 


E. You did not correctly setup the Load Balancer HTTP health check policy associated with backend set 
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Answer: B, E 


Explanation: 


Managing Traffic Management GEOLOCATION Steering Policies 


Geolocation steering policies distribute DNS traffic to different endpoints based on the location of the 
end user. Customers can define geographic regions composed of originating continent, countries or 
states/provinces (North America) and define a separate endpoint or set of endpoints for each region. 


The Health Checks service allows you to monitor the health of IP addresses and hostnames, as measured 
from geographic vantage points of your choosing, using HTTP and ping probes. After configuring a health 
check, you can view the monitor's results. The results include the location from which the host was 
monitored, the availability of the endpoint, and the date and time the test was performed. 


Also you can Combine Managing Traffic Management GEOLOCATION Steering Policies with Oracle Health 
Checks to fail over from one region to another 


The Load Balancing service provides health status indicators that use your health check policies to report 
on the general health of your load balancers and their components. 


if you misconfigure the health check Protocol between the Load balancer and backend set that can lead 
to not get an accurate response as example below 


If you run a TCP-level health check against an HTTP service, you might not get an accurate response. The 
TCP handshake can succeed and indicate that the service is up even when the HTTP service is ly 
configured or having other issues. Although the health check appears good customers might experience 
transaction failures. 


Question: 2 


Your team is conducting a root analysis (RCA) following a recent, unplanned outage. One of the block 
volumes attached to your production WebLogic server was deleted and you have tasked with identifying 
the source of the action. You search the Audit logs and find several Delete actions that occurred in the 
previous 24 hours. Given the sample of this event. 
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"event": { 

"tenantlId":"ocidl.tenancy.ocl. .aaaaaaaaymp6954bqkimnbuciaaslaaaaa" 
“ompartmentId":"ocidl.compartment.orl..aaaaaaaav4xowimindk?7znpuAlaaa" 

“compartmentName":"Production" 

"eventld":"14a87512 dblrille),A06-041027d191/9" 

"aventName" leloteVolume" 

"eventSource": "BlockValames" 

erviceAPI" 

"principalld":"ocidl.user.ocl..aaaaaaaaig  Skkeib62pz3ualqwxy6otzd7daaqaaaaa" 

edontialid":" 

“requestAction": "DELETE" 
"requestld":"csid06406dob4a7999cecId51604ce52/£79253t181thilb36blad34bM51040/FA112B6BFFOK3011165F6SUM00" 
"requestAgent":"Mozilia/5.° (Windows NT 10.0; *Win64; x64) ApploWebKit/531.36 WM, like Gecko) Chrome/15.0.377.14..." 
"requestHeaders": (... 

) 

"requestOrigin"™:"129.254.11.219" 

"request Resource":"/20160918/volumes/ociAl .volume.ocl.iad.abuwcljtxksq424tohccipilbzz213w) rrij2ezissses105125kz2xliq" 
"responsoStatus":"204" 


Which item from the event log helps you identify the individual or service that initiated the 
DeleteVolume API call? 


A. requestAgent 
B. eventource 
C. principalld 
D. requestOrigin 


E. eventlid 


Answer: C 


Explanation: 


The Oracle Cloud Infrastructure Audit service automatically records calls to all supported Oracle Cloud 
Infrastructure public application programming interface (API) endpoints as log events. Currently, all 
services support logging by Audit. 


Every audit log event includes two main parts: 

Envelopes that act as a container for all event messages 

Payloads that contain data from the resource emitting the event message 
The identity object contains the following attributes. 


data.identity.authType The type of authentication used. 
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data.identity.principalld The OCID of the principal. 
data.identity.principalName The name of the user or service. This value is the friendly name associated 


with principalld . 


Question: 3 


An online registration system Is currently hosted on one large Oracle Cloud Infrastructure (OCT) Bare 
metal compute Instance with attached block volume to store of the users' dat 


a. The registration system accepts the Information from the user, Including documents and photos then 
performs automated verification and processing to check it the user is eligible for registration. 


The registration system becomes unavailable at tunes when there is a surge of users using the system 
the existing architecture needs improvement as it takes a long time for the system to complete the 
processing and the attached block volumes are not large enough to use data being uploaded by the 
users. 


Which Is the most effective option to achieve a highly scalable solution? 


A. Attach more Block volumes as the data volume increase, use Oracle Notification Service (ONS) to 
distribute tasks to a pool of compute instances working In parallel, and Auto Scaling to dynamically size 
the pool of Instances depending on the number of notifications received from the Notification Service. 
Use Resource Manager stacks to replicate your architecture to another region. 


B. Change your architecture to use an OCI Object Storage standard tier bucket, replace the single bare 
metal instance with a Oracle Streaming Service (OSS) to ingest the Incoming requests and distribute the 
tasks to a group of compute Instances with Auto Scaling 


C. Upgrade your architecture to use a pool of Bare metal servers and configure them to use their local 
SSDs for faster data access Set up Oracle Streaming Service (OSS) to distribute the tasks to the pool of 
Bare metal Instances with Auto Scaling to dynamically increase or decrease the pool of compute 
instances depending on the length of the Streaming queue. 


D. Upgrade your architecture to use more Block volumes as the data volume Increases. Replace the 
single bare metal instance with a group of compute instances with Auto Scaling to dynamically increase 
or decrease the compute instance pools depending on the traffic. 


Answer: D 
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Explanation: 


Question: 4 


A data analytics company has been building Its now generation big data and analytics platform on Oracle 
Cloud Infrastructure (OCI). They need a storage service that provide the scale and performance that their 
big data applications require such as high throughput to compute nodes with low latency file operations 
in addition, their data needs to be stored redundantly across multiple nodes In a single availability 
domain and allows concurrent connections from multiple compute Instances hosted on multiple 
availability domains. 


Which OCI storage service can you use to meet i his requirement? 


A. Object Storage 
B. File System Storage 
C. Archive storage 


D. Block Volume 


Answer: B 


Explanation: 


Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade 
network file system. You can connect to a File Storage service file system from any bare metal, virtual 
machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system 
from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security 
(IPSec) virtual private network (VPN). 


Use the File Storage service when your application or workload includes big data and analytics, media 
processing, or content management, and you require Portable Operating System Interface (POSIX)- 
compliant file system access semantics and concurrently accessible storage. The File Storage service is 
designed to meet the needs of applications and users that need an enterprise file system across a wide 
range of use cases 
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Question: 5 


You have an Oracle database system in a virtual cloud network (VCN) that needs to be accessible on port 
1521 from your on-premises network CIDR 172.17.0.0/24. 


You have the following configuration currently. 


Virtual cloud network (VCD) is associated with a Dynamic Routing Gateway (DRG), and DRG has an active 
IPSec connection with your on-premises data center. 


Oracle database system is hosted in a private subnet 
The private subnet route table has the following configuration 


The private subnet route table has following configuration. 


However, you are still unable to connect to the Oracle Database system. 


Which action will resolve this issue? 
A) 


Add an EGRESS rule in network security group as following. 
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B) 


Add a route rule in the private subnet route table as following. 


C) 


Add an EGRESS rule in private subnet scurity list as following. 


D) 


Add an EGRESS rule in private subnet security list as following. 


A. Option A 


B. Option B 
C. Option C 


D. Option D 


Answer: C 


Explanation: 
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